01
Forensic readiness, law and chain of custody
Explain, demonstrate and verify **forensic readiness, law and chain of custody** using an authorised lab and a realistic Sierra Leone scenario.
- Forensic readiness, law and chain of custody60 min
← Course catalogue
CYB-310Advanced
Cybersecurity
Digital Forensics & Incident Investigation
Preserve, examine and communicate digital evidence using sound forensic and incident-investigation principles.
Part of these pathways
Course outline: enrolment opens after THNF content and assessment review.
What you will be able to do
Clear outcomes. Practical evidence.
- Preserve evidence integrity
- Plan forensic acquisition
- Analyse artefacts and timelines
- Present defensible findings
Course structure
Modules and lessons
02
Evidence acquisition, hashing and integrity
Explain, demonstrate and verify **evidence acquisition, hashing and integrity** using an authorised lab and a realistic Sierra Leone scenario.
- Evidence acquisition, hashing and integrity60 min
03
Disk, partition and filesystem analysis
Explain, demonstrate and verify **disk, partition and filesystem analysis** using an authorised lab and a realistic Sierra Leone scenario.
- Disk, partition and filesystem analysis60 min
04
Windows artefacts and event evidence
Explain, demonstrate and verify **windows artefacts and event evidence** using an authorised lab and a realistic Sierra Leone scenario.
- Windows artefacts and event evidence60 min
05
Linux server artefacts and logs
Explain, demonstrate and verify **linux server artefacts and logs** using an authorised lab and a realistic Sierra Leone scenario.
- Linux server artefacts and logs60 min
06
Memory and volatile-data concepts
Explain, demonstrate and verify **memory and volatile-data concepts** using an authorised lab and a realistic Sierra Leone scenario.
- Memory and volatile-data concepts60 min
07
Network, email and web evidence
Explain, demonstrate and verify **network, email and web evidence** using an authorised lab and a realistic Sierra Leone scenario.
- Network, email and web evidence60 min
08
Mobile and iOS/Android evidence concepts
Explain, demonstrate and verify **mobile and ios/android evidence concepts** using an authorised lab and a realistic Sierra Leone scenario.
- Mobile and iOS/Android evidence concepts60 min
09
Timeline construction and event correlation
Explain, demonstrate and verify **timeline construction and event correlation** using an authorised lab and a realistic Sierra Leone scenario.
- Timeline construction and event correlation60 min
10
Malware triage and reverse-engineering safety
Explain, demonstrate and verify **malware triage and reverse-engineering safety** using an authorised lab and a realistic Sierra Leone scenario.
- Malware triage and reverse-engineering safety60 min
11
Forensic reporting and expert communication
Explain, demonstrate and verify **forensic reporting and expert communication** using an authorised lab and a realistic Sierra Leone scenario.
- Forensic reporting and expert communication60 min
12
Sierra Leone incident case capstone
Explain, demonstrate and verify **sierra leone incident case capstone** using an authorised lab and a realistic Sierra Leone scenario.
- Sierra Leone incident case capstone60 min
Access and progression
Know what the course requires.
The required capability matters; the learner does not have to personally own every device.
Who it is for
Aspiring developers, technical learners, career changers and practitioners seeking applied computing skills.
Hardware access
Personal 64-bit computer with 8 GB RAM and 60 GB free, or use the managed lab device at a readiness-approved THNF centre.
Software and practical access
An authorised isolated virtual lab supplied and supervised by the training team; never use production or third-party systems without written permission.
Possible progression
Authorised security-support, SOC, vulnerability-management or digital-forensics trainee; external certifications remain separately awarded.
Progression is not a guarantee of employment or external certification.Sierra Leone context
Authorised scenarios involving local SMEs, schools, NGOs, mobile-money fraud and shared devices, with safeguarding and Sierra Leonean legal and ethical boundaries.
Skills in context
Career directions and next steps
These are realistic directions that the skills can support—not promises of employment, job titles or external certification.
- Cybersecurity-support trainee
- Security-operations trainee
- Vulnerability-management assistant
Possible progression pathways
Cybersecurity